Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/YsuMEjOwFrHwSBCJc9asPnYvY-0.mft
File: YsuMEjOwFrHwSBCJc9asPnYvY-0.mft (raw, json)
Hash identifier: 8kUqdC7qOm7kswosheA/cu7Xz3P0UjYJswPstS0WHhs=
Subject key identifier: CD:2C:30:B9:78:CA:5C:52:93:3D:E8:2D:77:23:C2:71:9A:1F:8C:BB
Authority key identifier: 62:CB:8C:12:33:B0:16:B1:F0:48:10:89:73:D6:AC:3E:76:2F:63:ED
Certificate issuer: /CN=62cb8c1233b016b1f048108973d6ac3e762f63ed
Certificate serial: 0198D4E0A8A1E1170ADE1AACD331CC25F0BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsuMEjOwFrHwSBCJc9asPnYvY-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/YsuMEjOwFrHwSBCJc9asPnYvY-0.mft
Manifest number: 11F1
Signing time: Sat 23 Aug 2025 03:02:29 +0000
Manifest this update: Sat 23 Aug 2025 03:02:29 +0000
Manifest next update: Sun 24 Aug 2025 03:02:29 +0000
Files and hashes: 1: YsuMEjOwFrHwSBCJc9asPnYvY-0.crl (hash: 7MYlj+obkaMGgRLW85Id5eIJZpu7UoxvRnodTxfE1AU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/YsuMEjOwFrHwSBCJc9asPnYvY-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/YsuMEjOwFrHwSBCJc9asPnYvY-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsuMEjOwFrHwSBCJc9asPnYvY-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:a8:a1:e1:17:0a:de:1a:ac:d3:31:cc:25:f0:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62cb8c1233b016b1f048108973d6ac3e762f63ed
Validity
Not Before: Aug 23 03:02:29 2025 GMT
Not After : Aug 24 03:02:29 2025 GMT
Subject: CN=cd2c30b978ca5c52933de82d7723c2719a1f8cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a0:70:ee:bb:b0:89:e7:03:38:24:ed:d3:a9:
ec:e0:98:c2:8e:e2:8b:56:f7:78:22:73:23:9c:28:
48:af:f7:18:90:db:6d:c9:c1:17:b5:20:cd:83:e0:
99:1f:ad:7e:a5:cc:91:62:78:59:af:a1:08:a2:cc:
03:a6:52:f9:f4:4d:81:44:83:4e:83:f0:2e:84:2b:
95:a4:5f:b1:f9:ed:f6:c6:bc:bd:8d:e8:d7:d3:99:
0d:0a:af:f8:9f:81:86:17:83:5c:0a:96:6c:b0:15:
ae:ea:39:47:d3:84:a4:a4:1b:3f:89:3a:5c:ef:59:
66:e8:0e:c5:d0:dd:5b:bc:df:82:06:eb:9a:ef:23:
9c:00:91:e0:60:02:af:54:5c:6b:2f:5d:de:b9:d8:
e9:1f:ad:38:54:1d:78:21:f0:7b:4a:66:24:11:00:
9d:08:df:69:72:19:b2:95:07:83:32:83:1c:ec:c1:
fb:3f:7a:7a:99:e1:53:3e:df:0d:da:7c:d8:70:82:
c8:18:2b:bb:4d:bb:53:67:20:d2:53:10:5a:bf:f8:
56:38:80:5f:63:90:2b:19:6c:99:31:c2:15:42:4a:
b4:f6:a6:26:d8:2a:01:5a:ee:f2:f8:9b:5b:7d:be:
a9:0c:c3:68:91:7a:d3:62:25:51:84:cc:c6:3a:94:
a4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:2C:30:B9:78:CA:5C:52:93:3D:E8:2D:77:23:C2:71:9A:1F:8C:BB
X509v3 Authority Key Identifier:
keyid:62:CB:8C:12:33:B0:16:B1:F0:48:10:89:73:D6:AC:3E:76:2F:63:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsuMEjOwFrHwSBCJc9asPnYvY-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/YsuMEjOwFrHwSBCJc9asPnYvY-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/YsuMEjOwFrHwSBCJc9asPnYvY-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:dc:c6:12:01:8a:f1:cf:cc:d8:27:af:c4:26:35:55:ef:09:
93:aa:30:32:df:9f:59:3d:75:21:ec:13:80:80:0e:6e:8d:e9:
f3:dd:4f:9c:19:3e:a3:f4:a9:08:bf:da:e1:91:6f:28:79:ef:
7f:1f:e9:d2:97:d5:cb:df:b8:f3:f9:6e:d6:57:1a:e3:cf:4c:
e2:17:c9:d1:03:9a:e9:87:ab:9a:6c:ab:a5:17:6d:07:07:5d:
08:6f:26:b1:79:fa:c7:d0:55:1f:96:fe:16:f5:c4:8b:5f:38:
4d:53:c8:95:c3:98:01:a0:c5:14:e0:98:78:44:0c:4d:9b:5d:
79:e7:4e:27:95:7e:a3:e5:c3:8d:af:e2:13:cd:3c:cd:22:39:
7b:7e:25:52:6d:03:25:13:bd:17:86:80:82:e2:cc:8b:71:70:
01:ec:08:64:69:9e:52:82:38:79:99:1b:bd:91:d2:00:fa:64:
cb:19:34:dd:43:dd:51:ca:65:e9:cd:8d:0a:94:2b:c0:4d:f6:
6f:e3:25:09:69:b1:96:4a:33:de:a0:ea:b2:18:57:7a:2b:54:
d3:47:80:83:2d:d9:30:fa:09:51:b8:ae:c6:87:16:cc:d5:ff:
66:63:83:e0:be:49:59:66:78:29:a1:9e:03:de:94:cb:23:5b:
1b:86:35:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4Kih4RcK3hqs0zHMJfC/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyY2I4YzEyMzNiMDE2YjFmMDQ4MTA4OTczZDZhYzNlNzYy
ZjYzZWQwHhcNMjUwODIzMDMwMjI5WhcNMjUwODI0MDMwMjI5WjAzMTEwLwYDVQQD
EyhjZDJjMzBiOTc4Y2E1YzUyOTMzZGU4MmQ3NzIzYzI3MTlhMWY4Y2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaBw7ruwiecDOCTt06ns4JjCjuKL
Vvd4InMjnChIr/cYkNttycEXtSDNg+CZH61+pcyRYnhZr6EIoswDplL59E2BRINO
g/AuhCuVpF+x+e32xry9jejX05kNCq/4n4GGF4NcCpZssBWu6jlH04SkpBs/iTpc
71lm6A7F0N1bvN+CBuua7yOcAJHgYAKvVFxrL13eudjpH604VB14IfB7SmYkEQCd
CN9pchmylQeDMoMc7MH7P3p6meFTPt8N2nzYcILIGCu7TbtTZyDSUxBav/hWOIBf
Y5ArGWyZMcIVQkq09qYm2CoBWu7y+Jtbfb6pDMNokXrTYiVRhMzGOpSkiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM0sMLl4ylxSkz3oLXcjwnGaH4y7MB8GA1UdIwQY
MBaAFGLLjBIzsBax8EgQiXPWrD52L2PtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXN1TUVqT3dGckh3U0JDSmM5YXNQbll2WS0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC80MDJlZWEtNDgxNC00ODc3LThkN2Et
M2NhMmY3OTZiNTk2LzEvWXN1TUVqT3dGckh3U0JDSmM5YXNQbll2WS0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC80MDJlZWEtNDgxNC00ODc3LThkN2EtM2NhMmY3OTZiNTk2
LzEvWXN1TUVqT3dGckh3U0JDSmM5YXNQbll2WS0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACNzGEgGK
8c/M2CevxCY1Ve8Jk6owMt+fWT11IewTgIAObo3p891PnBk+o/SpCL/a4ZFvKHnv
fx/p0pfVy9+48/lu1lca489M4hfJ0QOa6YermmyrpRdtBwddCG8msXn6x9BVH5b+
FvXEi184TVPIlcOYAaDFFOCYeEQMTZtdeedOJ5V+o+XDja/iE808zSI5e34lUm0D
JRO9F4aAguLMi3FwAewIZGmeUoI4eZkbvZHSAPpkyxk03UPdUcpl6c2NCpQrwE32
b+MlCWmxlkoz3qDqshhXeitU00eAgy3ZMPoJUbiuxocWzNX/ZmOD4L5JWWZ4KaGe
A96UyyNbG4Y13A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:54 2025 by rpki-client